Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
File:                     3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa (raw, json)
Hash identifier:          awiErC+pCDtjAI5ejGX8PLl7NvJTUYKiraxld4R0eJs=
Subject key identifier:   AC:AA:9C:D5:2D:EA:B1:23:B5:32:17:E4:33:25:41:FD:8E:FF:F9:64
Certificate issuer:       /CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82
Certificate serial:       51FAAE60B2D5829720DF4F68C1F6FCC8FADCF3B0
Authority key identifier: 41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa
Signing time:             Thu 04 Apr 2024 01:52:34 +0000
ROA not before:           Thu 04 Apr 2024 01:47:34 +0000
ROA not after:            Thu 03 Apr 2025 01:52:34 +0000
asID:                     264202
IP address blocks:        138.97.216.0/22 maxlen: 32

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fa:ae:60:b2:d5:82:97:20:df:4f:68:c1:f6:fc:c8:fa:dc:f3:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4178BB74E28D29CBC8D123A4F3CE26B160CC5C82
        Validity
            Not Before: Apr  4 01:47:34 2024 GMT
            Not After : Apr  3 01:52:34 2025 GMT
        Subject: CN=ACAA9CD52DEAB123B53217E4332541FD8EFFF964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:82:9a:bc:28:26:86:5c:8c:43:3e:a8:a6:5a:
                    3a:4a:79:12:93:76:b2:77:c4:c2:10:4a:85:a4:be:
                    c6:33:3d:3d:85:fe:0f:0a:81:15:ca:fa:e6:e0:ed:
                    3a:2b:c3:29:12:cf:25:4b:32:51:c7:e1:12:d6:e4:
                    47:a5:40:84:9e:7b:21:ea:c8:83:2a:9c:94:96:35:
                    4d:16:ac:a9:c2:88:00:e8:d9:d0:34:ac:3c:9e:62:
                    be:14:b0:2a:e1:b3:c7:82:e5:b8:7a:98:34:1e:41:
                    ee:fc:ad:e7:e7:79:ba:f6:a8:6f:30:ca:99:23:76:
                    cf:94:5b:3b:69:07:96:2e:b8:62:06:c5:d0:d7:bf:
                    f8:12:c7:1f:89:aa:33:d7:5f:e2:c0:b7:54:25:e4:
                    e9:eb:5a:d2:5a:9e:79:f3:e2:b6:a3:88:90:65:37:
                    cc:84:6f:13:e8:42:b0:76:47:0d:31:36:73:f9:2d:
                    17:cd:56:be:c6:12:6c:24:93:98:02:9a:a5:91:e2:
                    7c:eb:61:00:13:04:8d:43:2d:52:66:77:3d:3c:6e:
                    d0:fd:3d:fe:2b:28:55:78:17:64:08:6e:7a:ae:50:
                    a1:1e:27:54:96:d0:bd:4e:8d:43:91:d3:ec:4a:f1:
                    01:26:c3:e5:0b:f5:80:c3:f7:d7:1d:e8:4d:ca:e1:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AA:9C:D5:2D:EA:B1:23:B5:32:17:E4:33:25:41:FD:8E:FF:F9:64
            X509v3 Authority Key Identifier:
                keyid:41:78:BB:74:E2:8D:29:CB:C8:D1:23:A4:F3:CE:26:B1:60:CC:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4178BB74E28D29CBC8D123A4F3CE26B160CC5C82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ZbsyMfBFBbAPwDY4Ns5yaxnx4cWGMe69UNWNSe2Ku1a/2/3133382e39372e3231362e302f32322d3332203d3e20323634323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:9f:cc:7a:f9:9c:b9:d3:38:96:6c:d3:46:6e:23:23:8f:b3:
         a7:47:30:84:9c:a1:34:2c:44:1f:46:fa:43:24:fe:92:9d:87:
         fa:d0:27:20:d2:70:d4:36:cb:ed:f4:dc:70:a0:ad:ea:6e:a6:
         49:0e:8c:83:2b:06:39:36:dc:25:25:50:d2:61:21:90:bd:39:
         cd:f0:7f:c4:97:7d:5e:8c:68:f1:c1:44:46:bd:e3:23:63:96:
         95:9d:9c:f5:97:01:12:95:d1:23:87:87:a6:40:e7:0c:a0:ab:
         c9:7e:08:37:f4:08:77:75:4b:f8:66:7e:72:bf:45:73:cc:64:
         f9:f0:3d:d7:87:a6:83:b1:cd:e0:14:5f:89:55:49:37:9c:eb:
         95:dc:24:36:de:90:05:22:36:37:92:ae:1b:ac:d2:7e:da:fc:
         fe:90:88:11:c5:5f:89:4c:7c:74:3a:03:52:4b:db:81:51:a4:
         43:ad:31:81:41:97:16:cb:33:96:d0:f9:ff:74:85:62:08:ea:
         f4:48:15:b7:3c:6d:1f:36:93:95:bd:fb:92:63:2d:bc:05:cb:
         f3:95:3f:a0:85:81:1d:20:be:c8:83:7e:b9:8e:5e:8d:70:22:
         4e:16:61:75:ef:bc:67:c1:0d:42:94:de:01:c3:7a:e3:5a:42:
         7f:29:b7:99
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUfquYLLVgpcg309owfb8yPrc87AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE3OEJCNzRFMjhEMjlDQkM4RDEyM0E0RjNDRTI2QjE2
MENDNUM4MjAeFw0yNDA0MDQwMTQ3MzRaFw0yNTA0MDMwMTUyMzRaMDMxMTAvBgNV
BAMTKEFDQUE5Q0Q1MkRFQUIxMjNCNTMyMTdFNDMzMjU0MUZEOEVGRkY5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgpq8KCaGXIxDPqimWjpKeRKT
drJ3xMIQSoWkvsYzPT2F/g8KgRXK+ubg7TorwykSzyVLMlHH4RLW5EelQISeeyHq
yIMqnJSWNU0WrKnCiADo2dA0rDyeYr4UsCrhs8eC5bh6mDQeQe78refnebr2qG8w
ypkjds+UWztpB5YuuGIGxdDXv/gSxx+JqjPXX+LAt1Ql5OnrWtJannnz4rajiJBl
N8yEbxPoQrB2Rw0xNnP5LRfNVr7GEmwkk5gCmqWR4nzrYQATBI1DLVJmdz08btD9
Pf4rKFV4F2QIbnquUKEeJ1SW0L1OjUOR0+xK8QEmw+UL9YDD99cd6E3K4aYXAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrKqc1S3qsSO1MhfkMyVB/Y7/+WQwHwYDVR0j
BBgwFoAUQXi7dOKNKcvI0SOk884msWDMXIIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlpic3lNZkJGQmJBUHdEWTROczV5YXhueDRjV0dNZTY5VU5XTlNlMkt1
MWEvMi80MTc4QkI3NEUyOEQyOUNCQzhEMTIzQTRGM0NFMjZCMTYwQ0M1QzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxNzhCQjc0RTI4RDI5Q0JD
OEQxMjNBNEYzQ0UyNkIxNjBDQzVDODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJaYnN5TWZCRkJiQVB3RFk0TnM1eWF4bng0Y1dHTWU2OVVOV05TZTJLdTFhLzIv
MzEzMzM4MmUzOTM3MmUzMjMxMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzQzMjMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKYdgwDQYJKoZIhvcNAQELBQADggEBAKWfzHr5
nLnTOJZs00ZuIyOPs6dHMIScoTQsRB9G+kMk/pKdh/rQJyDScNQ2y+303HCgrepu
pkkOjIMrBjk23CUlUNJhIZC9Oc3wf8SXfV6MaPHBREa94yNjlpWdnPWXARKV0SOH
h6ZA5wygq8l+CDf0CHd1S/hmfnK/RXPMZPnwPdeHpoOxzeAUX4lVSTec65XcJDbe
kAUiNjeSrhus0n7a/P6QiBHFX4lMfHQ6A1JL24FRpEOtMYFBlxbLM5bQ+f90hWII
6vRIFbc8bR82k5W9+5JjLbwFy/OVP6CFgR0gvsiDfrmOXo1wIk4WYXXvvGfBDUKU
3gHDeuNaQn8pt5k=
-----END CERTIFICATE-----
Generated at Wed Jun 26 22:04:33 2024 by rpki-client on console-ams.rpki-client.org